Forum Discussion
Ed_26015
Nimbostratus
Dec 04, 2010Source routing with iRules
Hi all,
I hope you can help.
I have two interfaces on the F5 that connect back to a Cisco PIX again on different interfaces.
Topology is 10.130.4.1 & 10.130.32.1 for the ...
hoolio
Cirrostratus
Dec 06, 2010Hi Ed,
For performance and ease of management, you could combine all of the addresses/subnets that have a common destination IP into an address datagroup and then use matchclass (9.x) or class match (10.x) to look up the client IP. To check whether a match is being made, you could add logging to the iRule:
when CLIENT_ACCEPTED {
log local0. "[IP::client_addr]:[TCP::client_port]: destination [IP::local_addr]:[TCP::local_port]"
Check if client IP is in the my_subnets_class datagroup
if {[class match [IP::client_addr] equals my_subnets_class]}{
log local0. "[IP::client_addr]:[TCP::client_port]: Matched my_subnets_class, using 10.130.32.1"
node 10.130.32.1
} else {
node 10.130.4.1
log local0. "[IP::client_addr]:[TCP::client_port]: Matched my_subnets_class, using 10.130.32.1"
}
}
If you're testing with ICMP, make sure your virtual server type is defined as all protocols.
Aaron
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
